[PATCH] su: support denying accounts with blank password
Rich Felker
dalias at libc.org
Thu Oct 1 22:29:25 UTC 2015
On Thu, Oct 01, 2015 at 03:42:40PM -0300, Alain Mouette wrote:
> Why would you want to completely disable root login?
>
> If it is a security feature, how can it be used? It can be
> interesting to avoid escalating priviledges, but then how to to
> administrative tasks? (assuming ssh root login is disabled too)
Requiring pubkey-based ssh login is the canonical best-practices way.
Rich
More information about the busybox
mailing list